This Privacy Policy explains how FEHU Software Development, operated by Thomas James Conroy as a sole trader, collects, uses, stores and protects personal data in connection with the FEHU parts comparison and workshop management platform available at fehuapp.co.uk and fehusoftwaredevelopment.co.uk.
Data Controller: Thomas James Conroy, trading as FEHU Software Development
Address: 64 Gould Drive, Tewkesbury, GL20 8RL, United Kingdom
Email: info@fehusoftwaredevelopment.co.uk
Platform: fehuapp.co.uk
We are subject to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are in the process of registering with the Information Commissioner's Office (ICO) as required for organisations that process personal data.
| Data | Purpose | Legal Basis |
|---|---|---|
| Workshop name, contact name | Account creation and identification | Contract performance |
| Email address | Account management, service communications | Contract performance |
| Phone number | Account support | Contract performance |
| Login credentials (username, encrypted PIN) | Platform authentication | Contract performance |
| Search queries and usage data | Platform improvement, analytics | Legitimate interests |
| Billing information | Subscription processing | Contract performance |
When workshop subscribers use the FEHU Integrated Management System (IMS), they may enter data about their own customers. In this context, FEHU acts as a data processor and the workshop is the data controller. This data includes:
We process this data only on the documented instructions of the workshop subscriber. Workshops are solely responsible for ensuring they have a lawful basis to process their customers' data and for providing appropriate privacy notices to their own customers. Our obligations as data processor are set out in full in our Data Processing Agreement, which forms part of all workshop service contracts.
| Data | Purpose | Legal Basis |
|---|---|---|
| Enquiry form data (name, email, phone, workshop name) | Responding to sales enquiries | Legitimate interests / pre-contract |
| Google Analytics (anonymised) | Understanding website usage | Legitimate interests |
| Session cookies | Platform authentication | Strictly necessary |
We do not use your data for advertising, profiling, automated decision-making or any purpose beyond providing the FEHU service and fulfilling our legal obligations.
All data is stored on Supabase infrastructure hosted within the European Union (EU), ensuring compliance with UK GDPR data transfer requirements. We implement the following technical and organisational security measures:
Despite these measures, no system is completely secure. In the event of a personal data breach that poses a risk to individuals, we will notify the ICO within 72 hours and affected individuals without undue delay, as required by UK GDPR Article 33-34.
We do not sell, rent or share your personal data with third parties for commercial purposes. We share data only with the following sub-processors who assist in delivering the FEHU service:
| Processor | Purpose | Location |
|---|---|---|
| Supabase Inc. | Cloud database and authentication | EU (Frankfurt) |
| Railway Corp. | Application hosting and deployment | EU / US |
| Resend Inc. | Transactional email delivery | EU / US |
| Google LLC | Analytics (anonymised data only) | EU / US |
All sub-processors are contractually bound via Data Processing Agreements to process data only as instructed, implement appropriate security measures, and comply with applicable data protection law. Where data is transferred outside the UK/EU, appropriate safeguards are in place (Standard Contractual Clauses or adequacy decisions).
We may also disclose data where required by law, court order or regulatory authority, or where necessary to protect the rights, property or safety of FEHU, our subscribers or others.
| Data Type | Retention Period | Reason |
|---|---|---|
| Workshop account data | Duration of subscription + 12 months | Contract, legal obligations |
| IMS customer data (entered by workshop) | Until deletion requested or account closed + 30 days | Data processor obligation |
| Invoice records | 7 years | Legal / tax obligation (HMRC) |
| Search and usage logs | 12 months | Analytics and security |
| Audit trail data | 24 months | Security and dispute resolution |
| Enquiry form data (non-subscribers) | 6 months | Legitimate interests |
| Security logs | 6 months | Fraud prevention |
When data reaches the end of its retention period, it is securely deleted or anonymised. Workshops may request deletion of their account data at any time — see Your Rights below.
As a data subject, you have the following rights under the UK General Data Protection Regulation:
To exercise any of these rights, contact us at info@fehusoftwaredevelopment.co.uk. We will respond within one calendar month as required by UK GDPR Article 12. There is no charge for exercising your rights unless requests are manifestly unfounded or excessive.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
FEHU uses the following cookies:
| Cookie | Type | Purpose |
|---|---|---|
| Session cookie | Strictly necessary | Maintains your login session on the platform |
| Google Analytics (_ga, _gid) | Analytics | Anonymised usage statistics — IP addresses are anonymised |
We do not use advertising, tracking or third-party profiling cookies. Strictly necessary cookies cannot be disabled as they are essential for the platform to function. Analytics cookies can be declined.
The FEHU platform is intended for use by businesses and is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. We will notify active subscribers of material changes by email at least 14 days before they take effect. The current version will always be available at fehuapp.co.uk/privacy. Continued use of the platform after the effective date of changes constitutes acceptance of the updated policy.
For any questions, concerns or requests relating to this Privacy Policy or your personal data:
Thomas James Conroy
FEHU Software Development
64 Gould Drive, Tewkesbury, GL20 8RL
info@fehusoftwaredevelopment.co.uk